$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/b1f8fb3b-a82a-3540-813b-3f7707cf6368.roa File: b1f8fb3b-a82a-3540-813b-3f7707cf6368.roa (raw, json) Hash identifier: lmglFNN1rz5VV4Le8lJGO2Aq+94LljRdR8K5Krabxq8= Subject key identifier: B2:01:F1:41:77:35:18:53:50:A2:4C:88:98:E5:3F:49:BE:0A:27:4B Certificate issuer: /CN=8e49b4c6-4d58-42e0-abe2-93754fdcda35 Certificate serial: 010D0C9F4328584B715CA07868CE3CBB479E2760 Authority key identifier: 0A:49:18:96:98:6F:CF:D4:8D:B3:E6:A2:22:27:C1:26:59:D2:EB:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/b1f8fb3b-a82a-3540-813b-3f7707cf6368.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 399045 IP address blocks: 104.167.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:a0:78:68:ce:3c:bb:47:9e:27:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e49b4c6-4d58-42e0-abe2-93754fdcda35 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=b57b59c5-aa2c-4fa1-beb1-fe9864717330 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:1f:0c:b2:30:b7:9b:04:6b:fe:1d:5a:65:ad: b6:36:b6:ae:8f:9c:72:cb:8c:06:71:e1:17:56:3d: 4d:d1:c7:0f:4a:fc:7e:26:80:12:90:88:1a:1c:c9: 83:ab:5c:84:85:f8:1f:28:77:fb:71:d8:56:a4:61: f7:e7:54:ce:4d:4e:3d:58:11:ee:f6:f7:c8:05:42: 66:6e:85:37:8b:54:c6:3f:13:0f:77:d4:08:1b:65: 1c:95:07:5b:ae:75:ce:61:54:d3:79:8b:3f:73:99: b5:9b:71:02:1a:7c:31:09:46:d6:d9:1f:e4:7e:b3: 6f:41:5d:61:da:ca:74:ef:d9:2f:fa:d0:a1:fb:64: 40:e0:2c:e1:a4:d5:ed:07:75:4d:d1:5d:eb:4b:2c: 3e:25:3e:fb:ed:14:fa:9e:b4:94:3e:5f:b4:75:d0: 53:f5:b7:f5:ea:3c:e6:e6:40:a6:84:0e:8a:a8:df: 5d:36:a8:37:7d:ef:7a:0e:b6:dd:b2:24:f1:58:fa: 22:c4:41:76:20:f4:91:ae:9b:89:37:a2:e7:43:12: 16:76:b3:38:7a:2a:39:62:2b:b9:97:72:22:c0:50: a4:46:11:bc:a0:80:b6:82:e1:78:1d:5c:93:32:5a: f8:71:b8:d2:57:51:99:7b:ee:7e:14:fd:b5:cb:95: cc:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:01:F1:41:77:35:18:53:50:A2:4C:88:98:E5:3F:49:BE:0A:27:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/b1f8fb3b-a82a-3540-813b-3f7707cf6368.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.crl X509v3 Authority Key Identifier: keyid:0A:49:18:96:98:6F:CF:D4:8D:B3:E6:A2:22:27:C1:26:59:D2:EB:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer sbgp-ipAddrBlock: critical IPv4: 104.167.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:3d:a5:ec:1a:27:a9:dd:84:e2:36:71:f1:7f:c9:7e:fe:e3: c1:f6:24:a8:ce:0d:97:fb:cb:3a:ca:87:8b:db:e7:84:cc:f7: e9:10:6c:3a:b0:bd:1f:d7:09:33:30:6b:3e:9d:a1:98:9a:2d: 76:4a:aa:ef:d0:e3:13:21:e1:0f:e4:6f:39:98:9a:fe:75:c4: 8e:1f:ca:ba:6a:f6:f6:01:e9:b6:0f:ec:7d:af:9f:1b:b7:93: c7:b4:d0:0c:56:fb:1c:8b:e0:35:42:cf:1b:71:bb:5d:86:23: ae:f9:5d:7a:4c:69:db:35:ee:70:cb:fb:88:3e:fd:bc:2e:4f: 63:fc:77:f8:27:e6:8f:cf:50:8e:59:f2:12:27:43:36:1c:b2: 94:72:72:cf:84:2d:08:6c:5e:01:2b:e3:51:7f:a0:e7:76:70: a7:43:2a:66:12:d9:91:73:7a:84:6a:1e:96:87:2c:22:fc:89: 0a:d6:f5:35:9b:f3:14:ff:40:4d:da:b5:32:d4:ef:a5:b9:e4: e7:30:9a:5e:8c:51:40:bf:d5:7a:df:c6:c5:ec:87:29:7d:96: 4a:45:15:94:76:0b:7c:49:2a:64:df:26:6e:5d:83:74:a8:15: 71:8f:b4:bb:f3:2d:84:2d:cc:8d:68:4b:ca:6b:fc:fc:cb:3c: e0:e2:2a:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXKB4aM48u0eeJ2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGU0OWI0YzYtNGQ1OC00MmUwLWFiZTItOTM3NTRmZGNk YTM1MB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk YjU3YjU5YzUtYWEyYy00ZmExLWJlYjEtZmU5ODY0NzE3MzMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoB8MsjC3mwRr/h1aZa22Nrauj5xyy4wGceEX Vj1N0ccPSvx+JoASkIgaHMmDq1yEhfgfKHf7cdhWpGH351TOTU49WBHu9vfIBUJm boU3i1TGPxMPd9QIG2UclQdbrnXOYVTTeYs/c5m1m3ECGnwxCUbW2R/kfrNvQV1h 2sp079kv+tCh+2RA4CzhpNXtB3VN0V3rSyw+JT777RT6nrSUPl+0ddBT9bf16jzm 5kCmhA6KqN9dNqg3fe96DrbdsiTxWPoixEF2IPSRrpuJN6LnQxIWdrM4eio5Yiu5 l3IiwFCkRhG8oIC2guF4HVyTMlr4cbjSV1GZe+5+FP21y5XMpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLIB8UF3NRhTUKJMiJjlP0m+CidLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84ZTQ5 YjRjNi00ZDU4LTQyZTAtYWJlMi05Mzc1NGZkY2RhMzUvYjFmOGZiM2ItYTgyYS0z NTQwLTgxM2ItM2Y3NzA3Y2Y2MzY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGU0OWI0YzYtNGQ1OC00MmUwLWFi ZTItOTM3NTRmZGNkYTM1LzhlNDliNGM2LTRkNTgtNDJlMC1hYmUyLTkzNzU0ZmRj ZGEzNS5jcmwwHwYDVR0jBBgwFoAUCkkYlphvz9SNs+aiIifBJlnS62swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84ZTQ5YjRjNi00ZDU4LTQyZTAtYWJlMi05Mzc1 NGZkY2RhMzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaKfcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABo9pewaJ6ndhOI2cfF/yX7+48H2JKjODZf7yzrKh4vb54TM9+kQbDqw vR/XCTMwaz6doZiaLXZKqu/Q4xMh4Q/kbzmYmv51xI4fyrpq9vYB6bYP7H2vnxu3 k8e00AxW+xyL4DVCzxtxu12GI675XXpMads17nDL+4g+/bwuT2P8d/gn5o/PUI5Z 8hInQzYcspRycs+ELQhsXgEr41F/oOd2cKdDKmYS2ZFzeoRqHpaHLCL8iQrW9TWb 8xT/QE3atTLU76W55Ocwml6MUUC/1XrfxsXshyl9lkpFFZR2C3xJKmTfJm5dg3So FXGPtLvzLYQtzI1oS8pr/PzLPODiKns= -----END CERTIFICATE-----Generated at Sat Oct 11 03:13:32 2025 by rpki-client